The IP made multiple requests with the same Origin header.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

Damaging activities showing connections to rootkit attacks were associated with this IP.

It attempted to use the FTP server to distribute phishing emails.

It partook in whaling attacks, specifically targeting high-profile users within our system.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

It attempted to login to the SASL server with an invalid password.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

It attempted to perform a Land attack on the SSH server.

The IP attempted to register with the VOIP server using an invalid username.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

GET /login.action: Trying to find a Struts2 application to exploit.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

This IP belongs to Alphabet.

The IP attempted to perform XML Injection attacks on the Apache server.

This IP blocked legitimate users by performing IP hijacking.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

It made multiple requests from user agents claiming to be bots.